QUESTION 159Refer to the exhibit. Which two statements about this firewall output are true? (Choose two.)

A. The output is from a packet tracer debug.B. All packets are allowed to 192.168.1.0 255.255.0.0.C. All packets are allowed to 192.168.1.0 255.255.255.0.D. All packets are denied.E. The output is from a debug all command.

Answer: AC

QUESTION 160Which utility can you use to troubleshoot and determine the timeline of packet changes in a data path within a Cisco firewall?

A. packet tracerB. pingC. tracerouteD. SNMP walk

Answer: A

QUESTION 161What can an administrator do to simultaneously capture and trace packets in a Cisco ASA?

A. Install a Cisco ASA virtual appliance.B. Use the trace option of the capture command.C. Use the trace option of the packet-tracer command.D. Install a switch with a code that supports capturing, and configure a trunk to the Cisco ASA.

Answer: B

QUESTION 162Refer to the exhibit. Which command can produce this packet tracer output on a firewall?

QUESTION 163At which firewall severity level will debugs appear on a Cisco ASA?

A. 7B. 6C. 5D. 4

Answer: A

QUESTION 164A Cisco ASA is configured in multiple context mode and has two user-defined contexts–Context_A and Context_B. From which context are device logging messages sent?

A. AdminB. Context_AC. Context_BD. System

Answer: A

QUESTION 165Which three statements about the software requirements for a firewall failover configuration are true? (Choose three.)

A. The firewalls must be in the same operating mode.B. The firewalls must have the same major and minor software version.C. The firewalls must be in the same context mode.D. The firewalls must have the same major software version but can have different minor versions.E. The firewalls can be in different context modes.F. The firewalls can have different Cisco AnyConnect images.

Answer: ABC

QUESTION 166What can you do to enable inter-interface firewall communication for traffic that flows between two interfaces of the same security level?

A. Run the command same-security-traffic permit inter-interface globally.B. Run the command same-security-traffic permit intra-interface globally.C. Configure both interfaces to have the same security level.D. Run the command same-security-traffic permit inter-interface on the interface with the highest security level.

Answer: A

QUESTION 167How many bridge groups are supported on a firewall that operate in transparent mode?

A. 8B. 16C. 10D. 6

Answer: A

QUESTION 168In which way are management packets classified on a firewall that operates in multiple context mode?

A. by their interface IP addressB. by the routing tableC. by NATD. by their MAC addresses

Answer: A

QUESTION 169Where on a firewall does an administrator assign interfaces to contexts?

A. in the system execution spaceB. in the admin contextC. in a user-defined contextD. in the console